Mobile terminal

ABSTRACT

A mobile terminal includes an output unit configured to output whether authentication successes, a controller configured to perform explicit authentication based on authentication information, to collect data for implicit authentication if the explicit authentication successes, and to enroll a user behavior pattern for the implicit authentication based on the collected data, and a memory configured to store the user behavior pattern.

Pursuant to 35 U.S.C. § 119(a), this application claims the benefit ofearlier filing date and right of priority to Korean Patent ApplicationNo. 10-2018-0092692, filed on Aug. 8, 2018, the contents of which areall hereby incorporated by reference herein in its entirety.

BACKGROUND OF THE INVENTION 1. Field of the Invention

The present invention relates to a mobile terminal, and moreparticularly, to a mobile terminal for performing authentication usingbiology intelligence and cognitive ability.

2. Discussion of the Related Art

Artificial intelligence is a field of computer engineering andinformation technology involving studying how computers can think, learnand self-develop in ways similar to human intelligence, and means thatcomputers can emulate intelligent behavior of humans.

In addition, artificial intelligence does not exist by itself but isdirectly or indirectly associated with the other fields of computerscience. In particular, many attempts have been made to introduceelements of artificial intelligence into various fields of informationtechnology to solve problems of the fields.

A bio-based authentication method refers to a method of authenticating auser based on a unique body structure of the user or a behavior resultusing the body structure. Since the bio-based authentication method doesnot need to share secret information in advance and uses the bodyinformation of the user, security is high.

However, since the bio-based authentication method uses the uniquebiometric information of the user, if the information is exposed, a bigproblem may occur.

Therefore, an implicit authentication method based on a behavior patternof a user has been introduced.

The implicit authentication method may be mainly used in situationswhere authentication needs to be continuously maintained.

However, the implicit authentication method uses a result of patterningand analyzing the behavior of the user and thus has difficulty inauthentication accuracy. In addition, the implicit authentication methodrequires a long enrollment time.

SUMMARY OF THE INVENTION

Accordingly, an embodiment of the present invention is to address theabove-noted and other problems.

An object of the present invention is to provide a mobile terminalcapable of enhancing security with respect to continuous authentication,by combining explicit authentication and implicit authentication.

Another object of the present invention is to provide a mobile terminalcapable of reducing an enrollment time for implicit authentication, bycombining explicit authentication and implicit authentication.

To achieve the above objects, there is provided a mobile terminalincluding an output unit configured to output whether authenticationsuccesses, a controller configured to perform explicit authenticationbased on authentication information, to collect data for implicitauthentication if the explicit authentication successes, and to enroll auser behavior pattern for the implicit authentication based on thecollected data, and a memory configured to store the user behaviorpattern.

The controller may maintain an authenticated state if the enrolled userbehavior pattern matches a newly acquired user behavior pattern andrelease the authenticated state if the enrolled user behavior patterndoes not match the newly acquired user behavior pattern.

The controller may release the authenticated state and output anotification indicating that the authenticated state has been releasedthrough the output unit.

The controller may enroll the user behavior pattern using data collectedduring a predetermined period before or after performing the explicitauthentication.

The user behavior pattern may include a plurality of behavior items, andthe plurality of behavior items may include a first behavior itemindicating a state in which a user holds the mobile terminal, a secondbehavior item indicating that a gaze direction of the user is directedtoward a front surface of a display unit included in the output unit,and a third behavior item including a touch input speed of a keyboardincluded on the display unit.

The controller may determine that user behavior patterns match if newlycollected first to third behavior items respectively match pre-enrolledfirst to third behavior items, and determine that the implicitauthentication has succeeded.

The controller may maintain the authenticated state if the implicitauthentication has succeeded, and periodically perform the implicitauthentication.

The controller may determine that user behavior patterns match if anyone of newly collected first to third behavior items does not match anyone of pre-enrolled first to third behavior items, and determine thatthe implicit authentication has failed.

The controller may release the authenticated state, upon determiningthat the implicit authentication has failed.

The explicit authentication may be performed by inputting a password orinputting biometric information of a user.

The controller may periodically update the user behavior pattern for theimplicit authentication, whenever the explicit authentication isperformed.

Further scope of applicability of the present invention will becomeapparent from the detailed description given hereinafter. However, itshould be understood that the detailed description and specificexamples, while indicating preferred embodiments of the invention, aregiven by illustration only, since various changes and modificationswithin the spirit and scope of the invention will become apparent tothose skilled in the art from this detailed description.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1A is a block diagram of a mobile terminal in accordance with thepresent disclosure.

FIGS. 1B and 1C are views of one example of the mobile terminal, viewedfrom different directions.

FIG. 2 is a view of a deformable mobile terminal according to analternative embodiment of the present disclosure.

FIG. 3 is a view of a wearable mobile terminal according to anotheralternative embodiment of the present disclosure.

FIG. 4 is a view of a wearable mobile terminal according to anotheralternative embodiment of the present disclosure.

FIG. 5 is a diagram illustrating the detailed configuration of acontroller according to an embodiment of the present invention.

FIG. 6 is a flowchart illustrating a method of operating a mobileterminal according to an embodiment of the present invention.

FIG. 7 is a diagram illustrating a conventional explicit authenticationprocedure.

FIG. 8 is a diagram illustrating a conventional implicit authenticationprocedure.

FIG. 9 is a diagram illustrating an authentication procedure obtained bycombining explicit authentication and implicit authentication accordingto an embodiment of the present invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

Description will now be given in detail according to exemplaryembodiments disclosed herein, with reference to the accompanyingdrawings. For the sake of brief description with reference to thedrawings, the same or equivalent components may be provided with thesame reference numbers, and description thereof will not be repeated. Ingeneral, a suffix such as “module” and “unit” may be used to refer toelements or components. Use of such a suffix herein is merely intendedto facilitate description of the specification, and the suffix itself isnot intended to give any special meaning or function. In the presentdisclosure, that which is well-known to one of ordinary skill in therelevant art has generally been omitted for the sake of brevity. Theaccompanying drawings are used to help easily understand varioustechnical features and it should be understood that the embodimentspresented herein are not limited by the accompanying drawings. As such,the present disclosure should be construed to extend to any alterations,equivalents and substitutes in addition to those which are particularlyset out in the accompanying drawings.

It will be understood that although the terms first, second, etc. may beused herein to describe various elements, these elements should not belimited by these terms. These terms are generally only used todistinguish one element from another.

It will be understood that if an element is referred to as being“connected with” another element, the element can be directly connectedwith the other element or intervening elements may also be present. Incontrast, if an element is referred to as being “directly connectedwith” another element, there are no intervening elements present.

A singular representation may include a plural representation unless itrepresents a definitely different meaning from the context. Terms suchas “include” or “has” are used herein and should be understood that theyare intended to indicate an existence of several components, functionsor steps, disclosed in the specification, and it is also understood thatgreater or fewer components, functions, or steps may likewise beutilized.

Terminals presented herein may be implemented using a variety ofdifferent types of terminals. Examples of such terminals includecellular phones, smart phones, user equipment, laptop computers, digitalbroadcast terminals, personal digital assistants (PDAs), portablemultimedia players (PMPs), navigators, portable computers (PCs), slatePCs, tablet PCs, ultra-books, wearable devices (for example, smartwatches, smart glasses, head mounted displays (HMDs)), and the like.

By way of non-limiting example only, further description will be madewith reference to particular types of terminals. However, such teachingsapply equally to other types of terminals, such as those types notedherein. In addition, these teachings may also be applied to stationaryterminals such as digital TV, desktop computers, and the like.

Reference is now made to FIGS. 1A-1C, where FIG. 1A is a block diagramof a terminal in accordance with the present disclosure, FIG. 1B is aperspective view of a front side of a terminal according to anembodiment of the present invention, and FIG. 1C is a rear view of theterminal shown in FIG. 1B.

The terminal 100 may include components, such as a wirelesscommunication unit 110, an input unit 120, learning data unit 130, asensing unit 140, an output unit 150, an interface unit 160, a memory170, a controller 180, a power supply unit 190 and the like. FIG. 1Aillustrates the terminal having various components, but it is understoodthat implementing all of the illustrated components is not arequirement, and that greater or fewer components may alternatively beimplemented.

In more detail, the wireless communication unit 110 of those componentsmay typically include one or more modules which permit wirelesscommunications between the terminal 100 and a wireless communicationsystem, between the terminal 100 and another terminal 100, or betweenthe terminal 100 and an external server.

The wireless communication unit 110 may include at least one of abroadcast receiving module 111, a mobile communication module 112, awireless Internet module 113, a short-range communication module 114, alocation information module 115 and the like.

The input unit 120 may include a camera 121 for inputting an imagesignal, a microphone 122 or an audio input module for inputting an audiosignal, or a user input unit 123 (for example, a touch key, a push key(or a mechanical key), etc.) for allowing a user to input information.Audio data or image data collected by the input unit 120 may be analyzedand processed by a user's control command.

The learning data unit 130 may be configured to receive, categorize,store, and output information to be utilized for data mining, dataanalysis, intelligent decision making, and machine learning algorithmsand techniques. The learning data unit 130 may include one or morememory units configured to store data that is received, detected,sensed, generated, predefined, or otherwise output by the terminal, orreceived, detected, sensed, generated, predefined, or otherwise outputby another component, device, terminal, or entity in communication withthe terminal.

The learning data unit 130 may include memory incorporated orimplemented at the terminal. In some embodiments, learning data unit 130may be implemented using memory 170. Alternatively or additionally, thelearning data unit 130 may be implemented using memory associated withthe terminal, such as an external memory directly coupled to theterminal or memory maintained at a server in communication with theterminal. In other embodiments, the learning data unit 130 may beimplemented using memory maintained in a cloud computing environment, orother remote memory location that is accessible by the terminal througha communication scheme, such as a network.

The learning data unit 130 is generally configured to store data in oneor more databases to identify, index, categorize, manipulate, store,retrieve, and output the data for use in supervised or unsupervisedlearning, data mining, predictive analytics, or other machine learningtechniques. The information stored at the learning data unit 130 may beutilized by the controller 180, or one or more other controllers of theterminal, using any of a variety of different types of data analysis andmachine learning algorithms and techniques. Examples of such algorithmsand techniques include k-Nearest neighbor systems, fuzzy logic (e.g.,possibility theory), neural networks, boltzmann machines, vectorquantization, pulsed neural nets, support vector machines, maximummargin classifiers, hill-climbing, inductive logic systems, bayesiannetworks, petri nets (e.g., finite state machines, mealy machines, moorefinite state machines), classifier trees (e.g., perceptron trees,support vector trees, markov trees, decision tree forests, randomforests), pandemonium models and systems, clustering, artificiallyintelligent planning, artificially intelligent forecasting, data fusion,sensor fusion, image fusion, reinforcement learning, augmented reality,pattern recognition, automated planning, and the like.

The controller 180 may request, retrieve, receive, or otherwise utilizethe data of the learning data unit 130 to determine or predict at leastone executable operation of the terminal based on the informationdetermined or generated using the data analysis and machine learningalgorithms and techniques, and control the terminal to execute apredicted or desired operation among the at least one executableoperation. The controller 180 may perform various functions implementingemulation of intelligence (i.e., knowledge based systems, reasoningsystems, and knowledge acquisition systems); and including systems forreasoning with uncertainty (e.g., fuzzy logic systems), adaptivesystems, machine learning systems, artificial neural networks, and thelike.

The controller 180 may also include sub-modules to enable itsperformance and/or execution involving voice and natural speech languageprocessing, such as an I/O processing module, environment conditionmodule, a speech-to-text (STT) processing module, a natural languageprocessing module, a task flow processing module, and a serviceprocessing module. Each of these sub-modules may also have access to oneor more systems or data and models at the terminal, or a subset orsuperset thereof, including scheduling, vocabulary index, user data,task flow models, service models, and automatic speech recognition (ASR)systems. In other embodiments, the controller 180 or other aspects ofthe terminal may be implemented with said sub-modules, systems, or dataand models.

In some examples, based on the data at the learning data unit 130, thecontroller 180 may be configured to perform detecting and sensing a needbased on a contextual condition or a user's intent expressed in a userinput or natural language input; actively eliciting and/or obtaininginformation needed to fully determine a need based on the contextualcondition or a user's intent (e.g., by analyzing historical dataincluding historical input and output, pattern matching, disambiguatingwords, input intentions, etc.); determining the task flow for executinga function in response to the need based on the contextual condition oruser's intent; and executing the task flow to meet the need based on thecontextual condition or user's intent.

In some embodiments, the controller 180 may implement specific hardwareelements dedicated for learning data processes including memistors,memristors, transconductance amplifiers, pulsed neural circuits,artificially intelligent nanotechnology systems (e.g., autonomousnanomachines) or artificially intelligent quantum mechanical systems(e.g., quantum neural networks), and the like. In some embodiments, thecontroller 180 may include pattern recognition systems such as machinevision systems, acoustic recognition systems, handwriting recognitionsystems, data fusion systems, sensor fusion systems, and soft sensors.Machine vision systems can also include content based image retrieval,optical character recognition, augmented reality, egomotion, tracking oroptical flow, and the like.

The controller 180 may be configured to collect, sense, monitor,extract, detect, and/or receive signals or data, via one or more sensingcomponents at the terminal, in order to collect information forprocessing and storage at the learning data unit 130 and for use in dataanalysis and machine learning operations. Collection of information mayinclude sensing information through a sensor, extracting informationstored in the memory, such as memory 170, or receiving information fromanother terminal, entity, or an external storage through communicationmeans. Thus in one example, the controller 180 may collect historicalusage information at the terminal, store the historical usageinformation for use in data analytics, and at a future occurrence,determine a best match for executing a particular function usingpredictive modeling based on the stored historical usage information.

The controller 180 may also receive or sense information of thesurrounding environment, or other information, through the sensing unit140. In addition, the controller 180 may receive broadcast signalsand/or broadcast-related information, wireless signals, wireless data,and the like through the wireless communication unit 110. The controller180 may also receive image information (or a corresponding signal),audio information (or a corresponding signal), data, or user-inputinformation from an input unit.

The controller 180 may collect information in real time, and process orcategorize the information (for example, in a knowledge graph, commandpolicy, personalization database, dialog engine, etc.), and store theprocessed information in the memory 170 or the learning data unit 130.

If the operation of the terminal is determined based on data analysisand machine learning algorithms and techniques, the controller 180 maycontrol the components of the terminal to execute the determinedoperation. The controller 180 may then execute the determined operationby controlling the terminal based on the control command.

In some embodiments, if a specific operation is executed, the controller180 may analyze history information indicating the execution of thespecific operation through data analysis and machine learning algorithmsand techniques and execute updating of previously-learned informationbased on the analyzed information. Accordingly, the controller 180, incombination with the learning data unit 130, can improve the accuracy offuture performance of the data analysis and machine learning algorithmsand techniques based on the updated information.

The sensing unit 140 may include at least one sensor which senses atleast one of internal information of the terminal, a surroundingenvironment of the terminal and user information. For example, thesensing unit 140 may include a proximity sensor 141, an illuminationsensor 142, a touch sensor, an acceleration sensor, a magnetic sensor, aG-sensor, a gyroscope sensor, a motion sensor, an RGB sensor, aninfrared (IR) sensor, a finger scan sensor, a ultrasonic sensor, anoptical sensor (for example, refer to the camera 121), a microphone 122,a battery gage, an environment sensor (for example, a barometer, ahygrometer, a thermometer, a radiation detection sensor, a thermalsensor, a gas sensor, etc.), and a chemical sensor (for example, anelectronic nose, a health care sensor, a biometric sensor, etc.). On theother hand, the terminal disclosed herein may utilize information insuch a manner of combining information sensed by at least two sensors ofthose sensors.

The output unit 150 may be configured to output an audio signal, a videosignal or a tactile signal. The output unit 150 may include a displayunit 151, an audio output unit 152, a haptic module 153, an opticaloutput unit 154 and the like. The display unit 151 may have aninter-layered structure or an integrated structure with a touch sensorso as to implement a touch screen. The touch screen may provide anoutput interface between the terminal 100 and a user, as well asfunctioning as the user input unit 123 which provides an input interfacebetween the terminal 100 and the user.

The interface unit 160 may serve as an interface with various types ofexternal devices connected with the terminal 100. The interface unit160, for example, may include wired or wireless headset ports, externalpower supply ports, wired or wireless data ports, memory card ports,ports for connecting a device having an identification module, audioinput/output (I/O) ports, video I/O ports, earphone ports, or the like.The terminal 100 may execute an appropriate control associated with aconnected external device, in response to the external device beingconnected to the interface unit 160.

The memory 170 may store a plurality of application programs (orapplications) executed in the terminal 100, data for operations of theterminal 100, instruction words, and the like. At least some of thoseapplication programs may be downloaded from an external server viawireless communication. Some others of those application programs may beinstalled within the terminal 100 at the time of being shipped for basicfunctions of the terminal 100 (for example, receiving a call, placing acall, receiving a message, sending a message, etc.). On the other hand,the application programs may be stored in the memory 170, installed inthe terminal 100, and executed by the controller 180 to perform anoperation (or a function) of the terminal 100.

The controller 180 may typically control an overall operation of theterminal 100 in addition to the operations associated with theapplication programs. The controller 180 may provide or processinformation or functions appropriate for a user in a manner ofprocessing signals, data, information and the like, which are input oroutput by the aforementioned components, or activating the applicationprograms stored in the memory 170.

Terminal 100 is shown implemented with one controller 180 facilitatingoperation of all of the various units (e.g., wireless communication unit110, input unit 120, learning data unit 130, sensing unit 140, outputunit 150, interface unit 160, etc.) and submodules shown in the figure.However, one or more separate controllers 180 may alternatively beimplemented for any or all of such units and submodules.

Furthermore, the controller 180 may control at least part of thecomponents illustrated in FIG. 1A, in order to drive the applicationprograms stored in the memory 170. In addition, the controller 180 maydrive the application programs by combining at least two of thecomponents included in the terminal 100 for operation.

The power supply unit 190 may receive external power or internal powerand supply appropriate power required for operating respective elementsand components included in the terminal 100 under the control of thecontroller 180. The power supply unit 190 may include a battery, and thebattery may be an embedded battery or a replaceable battery.

At least part of those elements and components may be combined toimplement operation and control of the terminal or a control method ofthe terminal according to various exemplary embodiments describedherein. Also, the operation and control or the control method of theterminal may be implemented in the terminal in such a manner ofactivating at least one application program stored in the memory 170.

Hereinafter, each aforementioned component will be described in moredetail with reference to FIG. 1A, prior to explaining various exemplaryembodiments implemented by the terminal 100 having the configuration.

First, the wireless communication unit 110 will be described. Thebroadcast receiving module 111 of the wireless communication unit 110may receive a broadcast signal and/or broadcast associated informationfrom an external broadcast managing entity via a broadcast channel. Thebroadcast channel may include a satellite channel and a terrestrialchannel. At least two broadcast receiving modules 111 may be provided inthe terminal 100 to simultaneously receive at least two broadcastchannels or switch the broadcast channels.

The mobile communication module 112 may transmit/receive wirelesssignals to/from at least one of network entities, for example, a basestation, an external terminal, a server, and the like, on a mobilecommunication network, which is constructed according to technicalstandards or transmission methods for mobile communications (forexample, Global System for Mobile Communication (GSM), Code DivisionMulti Access (CDMA), Wideband CDMA (WCDMA), High Speed Downlink Packetaccess (HSDPA), Long Term Evolution (LTE), and the like). The wirelesssignals may include audio call signal, video (telephony) call signal, orvarious formats of data according to transmission/reception oftext/multimedia messages.

The wireless Internet module 113 denotes a module for wireless Internetaccess. This module may be internally or externally coupled to theterminal 100. The wireless Internet module 113 may transmit/receivewireless signals via communication networks according to wirelessInternet technologies. Examples of such wireless Internet access mayinclude Wireless LAN (WLAN), Wireless Fidelity (Wi-Fi) Direct, DigitalLiving Network Alliance (DLNA), Wireless Broadband (Wibro), WorldwideInteroperability for Microwave Access (Wimax), High Speed DownlinkPacket Access (HSDPA), Long Term Evolution (LTE), and the like. Thewireless Internet module 113 may transmit/receive data according to atleast one wireless Internet technology within a range including evenInternet technologies which are not aforementioned.

From the perspective that the wireless Internet accesses according toWibro, HSDPA, GSM, CDMA, WCDMA, LTE and the like are executed via amobile communication network, the wireless Internet module 113 whichperforms the wireless Internet access via the mobile communicationnetwork may be understood as a type of the mobile communication module112.

The short-range communication module 114 denotes a module forshort-range communications. Suitable technologies for implementing theshort-range communications may include BLUETOOTH™, Radio FrequencyIDentification (RFID), Infrared Data Association (IrDA), Ultra-WideBand(UWB), ZigBee, Near Field Communication (NFC), Wireless-Fidelity(Wi-Fi), Wi-Fi Direct, and the like. The short-range communicationmodule 114 may support wireless communications between the terminal 100and a wireless communication system, between the terminal 100 andanother terminal 100, or between the terminal and a network whereanother terminal 100 (or an external server) is located, via wirelesspersonal area networks.

Here, the another terminal 100 may be a wearable device, for example, asmart watch, smart glasses or a head mounted display (HMD), which isable to exchange data with the terminal 100 (or to like data with theterminal 100). The short-range communication module 114 may sense(recognize) a wearable device, which is able to communicate with theterminal), near the terminal 100. In addition, if the sensed wearabledevice is a device which is authenticated to communicate with theterminal 100 according to the present disclosure, the controller 180 maytransmit at least part of data processed in the terminal 100 to thewearable device via the short-range communication module 114. Hence, auser of the wearable device may use the data processed in the terminal100 on the wearable device. For example, if a call is received in theterminal 100, the user may answer the call using the wearable device.Also, if a message is received in the terminal 100, the user may checkthe received message using the wearable device.

The location information module 115 denotes a module for detecting orcalculating a position of the terminal. An example of the locationinformation module 115 may include a Global Position System (GPS) moduleor a Wi-Fi module. For example, if the terminal uses the GPS module, aposition of the terminal may be acquired using a signal sent from a GPSsatellite. As another example, if the terminal uses the Wi-Fi module, aposition of the terminal may be acquired based on information related toa wireless access point (AP) which transmits or receives a wirelesssignal to or from the Wi-Fi module. According to the need, the locationinformation module 115 may perform any function of the other modules ofthe wireless communication unit 110 to obtain data on the location ofthe terminal. As a module used to acquire the location (or currentlocation) of the terminal, the location information module 115 may notbe necessarily limited to a module for directly calculating or acquiringthe location of the terminal.

Next, the input unit 120 may be configured to provide an audio or videosignal (or information) input to the terminal or information input by auser to the terminal. For the input of the audio information, theterminal 100 may include one or a plurality of cameras 121. The camera121 may process image frames of still pictures or video obtained byimage sensors in a video call mode or a capture mode. The processedimage frames may be displayed on the display unit 151. On the otherhand, the plurality of cameras 121 disposed in the terminal 100 may bearranged in a matrix configuration. By use of the cameras 121 having thematrix configuration, a plurality of image information having variousangles or focal points may be input into the terminal 100. Also, theplurality of cameras 121 may be arranged in a stereoscopic structure toacquire a left image and a right image for implementing a stereoscopicimage.

The microphone 122 may process an external audio signal into electricaudio data. The processed audio data may be utilized in various mannersaccording to a function being executed in the terminal 100 (or anapplication program being executed). On the other hand, the microphone122 may include assorted noise removing algorithms to remove noisegenerated in the course of receiving the external audio signal.

The user input unit 123 may receive information input by a user. Ifinformation is input through the user input unit 123, the controller 180may control an operation of the terminal 100 to correspond to the inputinformation. The user input unit 123 may include a mechanical inputelement (or a mechanical key, for example, a button located on afront/rear surface or a side surface of the terminal 100, a dome switch,a jog wheel, a jog switch, etc.), and a touch-sensitive input means. Asone example, the touch-sensitive input means may be a virtual key, asoft key or a visual key, which is displayed on a touch screen throughsoftware processing, or a touch key which is disposed on a portionexcept for the touch screen. On the other hand, the virtual key or thevisual key may be displayable on the touch screen in various shapes, forexample, graphic, text, icon, video or a combination thereof.

On the other hand, the sensing unit 140 may sense at least one ofinternal information of the terminal, surrounding environmentinformation of the terminal and user information, and generate a sensingsignal corresponding to it. The controller 180 may control an operationof the terminal 100 or execute data processing, a function or anoperation associated with an application program installed in theterminal based on the sensing signal. Hereinafter, description will begiven in more detail of representative sensors of various sensors whichmay be included in the sensing unit 140.

First, a proximity sensor 141 refers to a sensor to sense presence orabsence of an object approaching a surface to be sensed, or an objectdisposed near a surface to be sensed, by using an electromagnetic fieldor infrared rays without a mechanical contact. The proximity sensor 141may be arranged at an inner region of the terminal covered by the touchscreen, or near the touch screen. The proximity sensor 141 may have alonger lifespan and a more enhanced utility than a contact sensor.

The proximity sensor 141, for example, may include a transmissive typephotoelectric sensor, a direct reflective type photoelectric sensor, amirror reflective type photoelectric sensor, a high-frequencyoscillation proximity sensor, a capacitance type proximity sensor, amagnetic type proximity sensor, an infrared rays proximity sensor, andso on. If the touch screen is implemented as a capacitance type, theproximity sensor 141 may sense proximity of a pointer to the touchscreen by changes of an electromagnetic field, which is responsive to anapproach of an object with conductivity. In this case, the touch screen(touch sensor) may be categorized as a proximity sensor.

On the other hand, for the sake of brief explanation, a state that thepointer is positioned to be proximate onto the touch screen withoutcontact will be referred to as ‘proximity touch,’ whereas a state thatthe pointer substantially comes in contact with the touch screen will bereferred to as ‘contact touch.’ For the position corresponding to theproximity touch of the pointer on the touch screen, such position willcorrespond to a position where the pointer faces perpendicular to thetouch screen upon the proximity touch of the pointer. The proximitysensor 141 may sense proximity touch, and proximity touch patterns(e.g., distance, direction, speed, time, position, moving state, etc.).On the other hand, the controller 180 may process data (or information)corresponding to the proximity touches and the proximity touch patternssensed by the proximity sensor 141, and output visual informationcorresponding to the process data on the touch screen. In addition, thecontroller 180 may control the terminal 100 to execute differentoperations or process different data (or information) according towhether a touch with respect to the same point on the touch screen iseither a proximity touch or a contact touch.

A touch sensor may sense a touch (or touch input) applied onto the touchscreen (or the display unit 151) using at least one of various types oftouch methods, such as a resistive type, a capacitive type, an infraredtype, a magnetic field type, and the like.

As one example, the touch sensor may be configured to convert changes ofpressure applied to a specific part of the display unit 151 or acapacitance occurring from a specific part of the display unit 151, intoelectric input signals. Also, the touch sensor may be configured tosense not only a touched position and a touched area, but also touchpressure. Here, a touch object is an object to apply a touch input ontothe touch sensor. Examples of the touch object may include a finger, atouch pen, a stylus pen, a pointer or the like.

If touch inputs are sensed by the touch sensors as described above,corresponding signals may be transmitted to a touch controller. Thetouch controller may process the received signals, and then transmitcorresponding data to the controller 180. Accordingly, the controller180 may sense which region of the display unit 151 has been touched.Here, the touch controller may be a component separate from thecontroller 180 or the controller 180 itself.

On the other hand, the controller 180 may execute a different control orthe same control according to a type of an object which touches thetouch screen (or a touch key provided in addition to the touch screen).Whether to execute the different control or the same control accordingto the object which gives a touch input may be decided based on acurrent operating state of the terminal 100 or a currently executedapplication program.

Meanwhile, the touch sensor and the proximity sensor may be executedindividually or in combination, to sense various types of touches, suchas a short (or tap) touch, a long touch, a multi-touch, a drag touch, aflick touch, a pinch-in touch, a pinch-out touch, a swipe touch, ahovering touch, and the like.

An ultrasonic sensor may be configured to recognize position informationrelating to a sensing object by using ultrasonic waves. The controller180 may calculate a position of a wave generation source based oninformation sensed by an illumination sensor and a plurality ofultrasonic sensors. Since light is much faster than ultrasonic waves, atime for which the light reaches the optical sensor may be much shorterthan a time for which the ultrasonic wave reaches the ultrasonic sensor.The position of the wave generation source may be calculated using thisfact. In more detail, the position of the wave generation source may becalculated by using a time difference from the time that the ultrasonicwave reaches the sensor based on the light as a reference signal.

The camera 121 of the input unit 120 may be a type of camera sensor. Thecamera sensor may include at least one of a photo sensor and a lasersensor. The camera 121 and the laser sensor may be combined to detect atouch of the sensing object with respect to a 3D stereoscopic image. Thephoto sensor may be laminated on the display device. The photo sensormay be configured to scan a movement of the sensing object in proximityto the touch screen. In more detail, the photo sensor may include photodiodes and transistors at rows and columns to scan content placed on thephoto sensor by using an electrical signal which changes according tothe quantity of applied light. Namely, the photo sensor may calculatethe coordinates of the sensing object according to variation of light tothus obtain position information of the sensing object.

The display unit 151 may output information processed in the terminal100. For example, the display unit 151 may display execution screeninformation of an application program driven in the terminal 100 or userinterface (UI) and graphic user interface (GUI) information in responseto the execution screen information.

Furthermore, the display unit 151 may also be implemented as astereoscopic display unit for displaying stereoscopic images. Thestereoscopic display unit may employ a stereoscopic display scheme suchas stereoscopic scheme (a glass scheme), an auto-stereoscopic scheme(glassless scheme), a projection scheme (holographic scheme), or thelike.

The audio output unit 152 may output audio data received from thewireless communication unit 110 or stored in the memory 170 in a callsignal reception mode, a call mode, a record mode, a voice recognitionmode, a broadcast reception mode, and the like. Also, the audio outputunit 152 may also provide audible output signals related to a particularfunction (e.g., a call signal reception sound, a message receptionsound, etc.) performed by the terminal 100. The audio output unit 152may include a receiver, a speaker, a buzzer or the like.

A haptic module 153 may generate various tactile effects that can befelt by a user. A representative example of tactile effect generated bythe haptic module 153 may be vibration. The intensity, pattern and thelike of vibration generated by the haptic module 153 may be controlledby a user's selection or the settings of the controller. For example,the haptic module 153 may output different vibrations in a combinedmanner or in a sequential manner.

Besides vibration, the haptic module 153 may generate various othertactile effects, including an effect by stimulation such as a pinarrangement vertically moving with respect to a contact skin, a sprayforce or suction force of air through a jet orifice or a suctionopening, a touch on the skin, a contact of an electrode, electrostaticforce, etc., an effect by reproducing the sense of cold and warmth usingan element that can absorb or generate heat, and the like.

The haptic module 153 may be implemented to allow the user to feel atactile effect through a muscle sensation such as the user's fingers orarm, as well as transferring the tactile effect through a directcontact. Two or more haptic modules 153 may be provided according to theconfiguration of the terminal 100.

An optical output unit 154 may output a signal for indicating an eventgeneration using light of a light source. Examples of events generatedin the terminal 100 may include a message reception, a call signalreception, a missed call, an alarm, a schedule notice, an emailreception, an information reception through an application, and thelike. A signal output by the optical output unit 154 may be implementedin such a manner that the terminal emits monochromatic light or lightwith a plurality of colors. The signal output may be terminated as theterminal senses a user's event checking.

The interface unit 160 may serve as an interface with every externaldevice connected with the terminal 100. For example, the interface unit160 may receive data transmitted from an external device, receive powerto transfer to each element within the terminal 100, or transmitinternal data of the terminal 100 to an external device. For example,the interface unit 160 may include wired or wireless headset ports,external power supply ports, wired or wireless data ports, memory cardports, ports for connecting a device having an identification module,audio input/output (I/O) ports, video I/O ports, earphone ports, or thelike.

The identification module may be a chip that stores various informationfor authenticating authority of using the terminal 100 and may include auser identity module (UIM), a subscriber identity module (SIM), auniversal subscriber identity module (USIM), and the like. In addition,the device having the identification module (referred to as ‘identifyingdevice’, hereinafter) may take the form of a smart card. Accordingly,the identifying device may be connected with the terminal 100 via theinterface unit 160.

Furthermore, if the terminal 100 is connected with an external cradle,the interface unit 160 may serve as a passage to allow power from thecradle to be supplied to the terminal 100 therethrough or may serve as apassage to allow various command signals input by the user from thecradle to be transferred to the terminal therethrough. Various commandsignals or power input from the cradle may operate as signals forrecognizing that the terminal is properly mounted on the cradle.

The memory 170 may store programs for operations of the controller 180and temporarily store input/output data (for example, phonebook,messages, still images, videos, etc.). The memory 170 may store datarelated to various patterns of vibrations and audio which are output inresponse to touch inputs on the touch screen.

The memory 170 may include at least one type of storage medium includinga Flash memory, a hard disk, a multimedia card micro type, a card-typememory (e.g., SD or DX memory, etc.), a Random Access Memory (RAM), aStatic Random Access Memory (SRAM), a Read-Only Memory (ROM), anElectrically Erasable Programmable Read-Only Memory (EEPROM), aProgrammable Read-Only memory (PROM), a magnetic memory, a magneticdisk, and an optical disk. Also, the terminal 100 may be operated inrelation to a web storage device that performs the storage function ofthe memory 170 over the Internet or other network.

As aforementioned, the controller 180 may typically control the generaloperations of the terminal 100. For example, the controller 180 may setor release a lock state for restricting a user from inputting a controlcommand with respect to applications if a state of the terminal meets apreset condition.

Furthermore, the controller 180 may also perform controlling andprocessing associated with voice calls, data communications, videocalls, and the like, or perform pattern recognition processing torecognize a handwriting input or a picture drawing input performed onthe touch screen as characters or images, respectively. In addition, thecontroller 180 may control one or a combination of those components inorder to implement various exemplary embodiments disclosed herein.

The power supply unit 190 may receive external power or internal powerand supply appropriate power required for operating respective elementsand components included in the terminal 100 under the control of thecontroller 180. The power supply unit 190 may include a battery. Thebattery may be an embedded battery which is rechargeable or bedetachably coupled to the terminal body for charging.

Furthermore, the power supply unit 190 may include a connection port.The connection port may be configured as one example of the interfaceunit 160 to which an external (re)charger for supplying power torecharge the battery is electrically connected.

As another example, the power supply unit 190 may be configured torecharge the battery in a wireless manner without use of the connectionport. Here, the power supply unit 190 may receive power, transferredfrom an external wireless power transmitter, using at least one of aninductive coupling method which is based on magnetic induction or amagnetic resonance coupling method which is based on electromagneticresonance.

Various embodiments described herein may be implemented in acomputer-readable or its similar medium using, for example, software,hardware, or any combination thereof. For a hardware implementation, theembodiments described herein may be implemented within one or moreapplication specific integrated circuits (ASICs), digital signalprocessors (DSPs), digital signal processing devices (DSPDs),programmable logic devices (PLDs), field programmable gate arrays(FPGAs), processors, controllers, micro-controllers, microprocessors,other electronic units designed to perform the functions describedherein, or a selective combination thereof. In some cases, suchembodiments are implemented by controller 180.

For a software implementation, certain embodiments described herein maybe implemented with separate software modules, such as procedures andfunctions, each of which perform one or more of the functions andoperations described herein. The software codes can be implemented witha software application written in any suitable programming language andmay be stored in memory (for example, memory 170), and executed by acontroller or processor (for example, controller 180).

Referring to FIGS. 1B and 1C, the terminal 100 disclosed herein may beimplemented using a bar-type terminal body. However, the presentdisclosure may not be limited to this, but also may be applicable tovarious structures such as watch type, clip type, glasses type or foldertype, flip type, slide type, swing type, swivel type, or the like, inwhich two and more bodies are combined with each other in a relativelymovable manner. The description to be associated with a specific type ofterminal or on a specific type of terminal will be also typicallyapplied to another type of terminal. The terminal body may be formedusing at least one assembly.

The terminal 100 may include a case (casing, housing, cover, etc.)forming the appearance of the terminal. In this embodiment, the case maybe divided into a front case 101 and a rear case 102. Various electroniccomponents may be incorporated into a space formed between the frontcase 101 and the rear case 102. At least one middle case may beadditionally disposed between the front case 101 and the rear case 102

A display unit 151 may be disposed on a front surface of the terminalbody to output information. As illustrated, a window 151 a of thedisplay unit 151 may be mounted to the front case 101 so as to form thefront surface of the terminal body together with the front case 101.

In some cases, electronic components may also be mounted to the rearcase 102. Examples of those electronic components mounted to the rearcase 102 may include a detachable battery, an identification module, amemory card and the like. Here, a rear cover 103 for covering theelectronic components mounted may be detachably coupled to the rear case102. Therefore, if the rear cover 103 is detached from the rear case102, the electronic components mounted to the rear case 102 may beexternally exposed.

As illustrated, if the rear cover 103 is coupled to the rear case 102, aside surface of the rear case 102 may be partially exposed. In somecases, upon the coupling, the rear case 102 may also be completelyshielded by the rear cover 103. On the other hand, the rear cover 103may include an opening for externally exposing a camera 121 b or anaudio output module 152 b.

The cases 101, 102, 103 may be formed by injection-molding syntheticresin or may be formed of a metal, for example, stainless steel (STS),titanium (Ti), or the like.

Unlike the example which the plurality of cases form an inner space foraccommodating such various components, the terminal 100 may beconfigured such that one case forms the inner space. In this example, aterminal 100 having a uni-body formed in such a manner that syntheticresin or metal extends from a side surface to a rear surface may also beimplemented.

On the other hand, the terminal 100 may include a waterproofing unit(not shown) for preventing an introduction of water into the terminalbody. For example, the waterproofing unit may include a waterproofingmember which is located between the window 151 a and the front case 101,between the front case 101 and the rear case 102, or between the rearcase 102 and the rear cover 103, to hermetically seal an inner space ifthose cases are coupled.

The terminal 100 may include a display unit 151, first and second audiooutput modules 152 a and 152 b, a proximity sensor 141, an illuminationsensor 152, an optical output module 154, first and second cameras 121 aand 121 b, first and second manipulation units 123 a and 123 b, amicrophone 122, an interface unit 160 and the like.

Hereinafter, description will be given of an exemplary terminal 100 thatthe display unit 151, the first audio output module 152 a, the proximitysensor 141, the illumination sensor 142, the optical output module 154,the first camera 121 a and the first manipulation unit 123 a aredisposed on the front surface of the terminal body, the secondmanipulation unit 123 b, the microphone 122 and the interface unit 160are disposed on a side surface of the terminal body, and the secondaudio output module 152 b and the second camera 121 b are disposed on arear surface of the terminal body, with reference to FIGS. 1B and 1C.

Here, those components may not be limited to the arrangement, but beexcluded or arranged on another surface if necessary. For example, thefirst manipulation unit 123 a may not be disposed on the front surfaceof the terminal body, and the second audio output module 152 b may bedisposed on the side surface other than the rear surface of the terminalbody.

The display unit 151 may output information processed in the terminal100. For example, the display unit 151 may display execution screeninformation of an application program driven in the terminal 100 or userinterface (UI) and graphic user interface (GUI) information in responseto the execution screen information.

The display unit 151 may include at least one of a liquid crystaldisplay (LCD), a thin film transistor-liquid crystal display (TFT-LCD),an organic light emitting diode (OLED), a flexible display, a3-dimensional (3D) display, and an e-ink display.

The display unit 151 may be implemented using two or more displays. Forinstance, a plurality of the display units 151 may be arranged on onesurface to be spaced apart from or integrated with each other, or may bearranged on different surfaces.

The display unit 151 may include a touch sensor which senses a touchonto the display unit so as to receive a control command in a touchingmanner. If a touch is input to the display unit 151, the touch sensormay be configured to sense this touch and the controller 180 maygenerate a control command corresponding to the touch. The content whichis input in the touching manner may be a text or numerical value, or amenu item which can be indicated or designated in various modes.

The touch sensor may be configured in a form of film having a touchpattern. The touch sensor may be a metal wire, which is disposed betweenthe window 151 a and a display (not shown) on a rear surface of thewindow 151 a or patterned directly on the rear surface of the window 151a. Alternatively, the touch sensor may be integrally formed with thedisplay. For example, the touch sensor may be disposed on a substrate ofthe display or within the display.

The display unit 151 may form a touch screen together with the touchsensor. Here, the touch screen may serve as the user input unit 123 (seeFIG. 1A). Therefore, the touch screen may replace at least some offunctions of the first manipulation unit 123 a.

The first audio output module 152 a may be implemented in the form of areceiver for transferring voice sounds to the user's ear or a loudspeaker for outputting various alarm sounds or multimedia reproductionsounds.

The window 151 a of the display unit 151 may include a sound hole foremitting sounds generated from the first audio output module 152 a.Here, the present disclosure may not be limited to this. It may also beconfigured such that the sounds are released along an assembly gapbetween the structural bodies (for example, a gap between the window 151a and the front case 101). In this case, a hole independently formed tooutput audio sounds may not be seen or hidden in terms of appearance,thereby further simplifying the appearance of the terminal 100.

The optical output module 154 may output light for indicating an eventgeneration. Examples of the event generated in the terminal 100 mayinclude a message reception, a call signal reception, a missed call, analarm, a schedule notice, an email reception, information receptionthrough an application, and the like. If a user's event checking issensed, the controller may control the optical output unit 154 to stopthe output of the light.

The first camera 121 a may process video frames such as still or movingimages obtained by the image sensor in a video call mode or a capturemode. The processed video frames may be displayed on the display unit151 or stored in the memory 170.

The first and second manipulation units 123 a and 123 b are examples ofthe user input unit 123, which may be manipulated by a user to input acommand for controlling the operation of the terminal 100. The first andsecond manipulation units 123 a and 123 b may also be commonly referredto as a manipulating portion, and may employ any method if it is atactile manner allowing the user to perform manipulation with a tactilefeeling such as touch, push, scroll or the like.

The drawings are illustrated on the basis that the first manipulationunit 123 a is a touch key, but the present disclosure may not benecessarily limited to this. For example, the first manipulation unit123 a may be configured with a mechanical key, or a combination of atouch key and a push key.

The content received by the first and second manipulation units 123 aand 123 b may be set in various ways. For example, the firstmanipulation unit 123 a may be used by the user to input a command suchas menu, home key, cancel, search, or the like, and the secondmanipulation unit 123 b may be used by the user to input a command, suchas controlling a volume level being output from the first or secondaudio output module 152 a or 152 b, switching into a touch recognitionmode of the display unit 151, or the like.

On the other hand, as another example of the user input unit 123, a rearinput unit (not shown) may be disposed on the rear surface of theterminal body. The rear input unit may be manipulated by a user to inputa command for controlling an operation of the terminal 100. The contentinput may be set in various ways. For example, the rear input unit maybe used by the user to input a command, such as power on/off, start,end, scroll or the like, controlling a volume level being output fromthe first or second audio output module 152 a or 152 b, switching into atouch recognition mode of the display unit 151, or the like. The rearinput unit may be implemented into a form allowing a touch input, a pushinput or a combination thereof.

The rear input unit may be disposed to overlap the display unit 151 ofthe front surface in a thickness direction of the terminal body. As oneexample, the rear input unit may be disposed on an upper end portion ofthe rear surface of the terminal body such that a user can easilymanipulate it using a forefinger if the user grabs the terminal bodywith one hand. However, the present disclosure may not be limited tothis, and the position of the rear input unit may be changeable.

If the rear input unit is disposed on the rear surface of the terminalbody, a new user interface may be implemented using the rear input unit.Also, the aforementioned touch screen or the rear input unit maysubstitute for at least part of functions of the first manipulation unit123 a located on the front surface of the terminal body. Accordingly, ifthe first manipulation unit 123 a is not disposed on the front surfaceof the terminal body, the display unit 151 may be implemented to have alarger screen.

On the other hand, the terminal 100 may include a finger scan sensorwhich scans a user's fingerprint. The controller may use fingerprintinformation sensed by the finger scan sensor as an authentication means.The finger scan sensor may be installed in the display unit 151 or theuser input unit 123.

The microphone 122 may be formed to receive the user's voice, othersounds, and the like. The microphone 122 may be provided at a pluralityof places, and configured to receive stereo sounds.

The interface unit 160 may serve as a path allowing the terminal 100 toexchange data with external devices. For example, the interface unit 160may be at least one of a connection terminal for connecting to anotherdevice (for example, an earphone, an external speaker, or the like), aport for near field communication (for example, an Infrared DataAssociation (IrDA) port, a Bluetooth port, a wireless LAN port, and thelike), or a power supply terminal for supplying power to the terminal100. The interface unit 160 may be implemented in the form of a socketfor accommodating an external card, such as Subscriber IdentificationModule (SIM), User Identity Module (UIM), or a memory card forinformation storage.

The second camera 121 b may be further mounted to the rear surface ofthe terminal body. The second camera 121 b may have an image capturingdirection, which is substantially opposite to the direction of the firstcamera unit 121 a.

The second camera 121 b may include a plurality of lenses arranged alongat least one line. The plurality of lenses may also be arranged in amatrix configuration. The cameras may be referred to as an ‘arraycamera.’ If the second camera 121 b is implemented as the array camera,images may be captured in various manners using the plurality of lensesand images with better qualities may be obtained.

A flash 124 may be disposed adjacent to the second camera 121 b. If animage of a subject is captured with the camera 121 b, the flash 124 mayilluminate the subject.

The second audio output module 152 b may further be disposed on theterminal body. The second audio output module 152 b may implementstereophonic sound functions in conjunction with the first audio outputmodule 152 a (refer to FIG. 1B), and may be also used for implementing aspeaker phone mode for call communication.

At least one antenna for wireless communication may be disposed on theterminal body. The antenna may be installed in the terminal body orformed on the case. For example, an antenna which configures a part ofthe broadcast receiving module 111 (see FIG. 1A) may be retractable intothe terminal body. Alternatively, an antenna may be formed in a form offilm to be attached onto an inner surface of the rear cover 103 or acase including a conductive material may serve as an antenna.

A power supply unit 190 (refer to FIG. 1A) for supplying power to theterminal 100 may be disposed on the terminal body. The power supply unit190 may include a battery which is mounted in the terminal body ordetachably coupled to an outside of the terminal body.

The battery may receive power via a power source cable connected to theinterface unit 160. Also, the battery may be (re)chargeable in awireless manner using a wireless charger. The wireless charging may beimplemented by magnetic induction or electromagnetic resonance.

On the other hand, the drawing illustrates that the rear cover 103 iscoupled to the rear case 102 for shielding the battery, so as to preventseparation of the battery and protect the battery from an externalimpact or foreign materials. If the battery is detachable from theterminal body, the rear case 103 may be detachably coupled to the rearcase 102.

An accessory for protecting an appearance or assisting or extending thefunctions of the terminal 100 may further be provided on the terminal100. As one example of the accessory, a cover or pouch for covering oraccommodating at least one surface of the terminal 100 may be provided.The cover or pouch may cooperate with the display unit 151 to extend thefunction of the terminal 100. Another example of the accessory may be atouch pen for assisting or extending a touch input onto a touch screen.

FIG. 2 is a view of a deformable mobile terminal according to analternative embodiment of the present disclosure. In this figure, mobileterminal 200 is shown having display unit 251, which is a type ofdisplay that is deformable by an external force. This deformation, whichincludes display unit 251 and other components of mobile terminal 200,may include any of curving, bending, folding, twisting, rolling, andcombinations thereof. The deformable display unit 251 may also bereferred to as a “flexible display unit.” In some implementations, theflexible display unit 251 may include a general flexible display,electronic paper (also known as e-paper), and combinations thereof. Ingeneral, mobile terminal 200 may be configured to include features thatare the same or similar to that of mobile terminal 100 of FIGS. 1A-1C.

The flexible display of mobile terminal 200 is generally formed as alightweight, non-fragile display, which still exhibits characteristicsof a conventional flat panel display, but is instead fabricated on aflexible substrate which can be deformed as noted previously.

The term e-paper may be used to refer to a display technology employingthe characteristic of a general ink, and is different from theconventional flat panel display in view of using reflected light.E-paper is generally understood as changing displayed information usinga twist ball or via electrophoresis using a capsule.

If in a state that the flexible display unit 251 is not deformed (forexample, in a state with an infinite radius of curvature and referred toas a first state), a display region of the flexible display unit 251includes a generally flat surface. If in a state that the flexibledisplay unit 251 is deformed from the first state by an external force(for example, a state with a finite radius of curvature and referred toas a second state), the display region may become a curved surface or abent surface. As illustrated, information displayed in the second statemay be visual information output on the curved surface. The visualinformation may be realized in such a manner that a light emission ofeach unit pixel (sub-pixel) arranged in a matrix configuration iscontrolled independently. The unit pixel denotes an elementary unit forrepresenting one color.

According to one alternative embodiment, the first state of the flexibledisplay unit 251 may be a curved state (for example, a state of beingcurved from up to down or from right to left), instead of being in flatstate. In this embodiment, if an external force is applied to theflexible display unit 251, the flexible display unit 251 may transitionto the second state such that the flexible display unit is deformed intothe flat state (or a less curved state) or into a more curved state.

If desired, the flexible display unit 251 may implement a flexible touchscreen using a touch sensor in combination with the display. If a touchis received at the flexible touch screen, the controller 180 can executecertain control corresponding to the touch input. In general, theflexible touch screen is configured to sense touch and other input whilein both the first and second states.

One option is to configure the mobile terminal 200 to include adeformation sensor which senses the deforming of the flexible displayunit 251. The deformation sensor may be included in the sensing unit140.

The deformation sensor may be located in the flexible display unit 251or the case 201 to sense information related to the deforming of theflexible display unit 251. Examples of such information related to thedeforming of the flexible display unit 251 may be a deformed direction,a deformed degree, a deformed position, a deformed amount of time, anacceleration that the deformed flexible display unit 251 is restored,and the like. Other possibilities include most any type of informationwhich can be sensed in response to the curving of the flexible displayunit or sensed while the flexible display unit 251 is transitioninginto, or existing in, the first and second states.

In some embodiments, controller 180 or other component can changeinformation displayed on the flexible display unit 251, or generate acontrol signal for controlling a function of the mobile terminal 200,based on the information related to the deforming of the flexibledisplay unit 251. Such information is typically sensed by thedeformation sensor.

The mobile terminal 200 is shown having a case 201 for accommodating theflexible display unit 251. The case 201 can be deformable together withthe flexible display unit 251, taking into account the characteristicsof the flexible display unit 251.

A battery (not shown in this figure) located in the mobile terminal 200may also be deformable in cooperation with the flexible display unit261, taking into account the characteristic of the flexible display unit251. One technique to implement such a battery is to use a stack andfolding method of stacking battery cells.

The deformation of the flexible display unit 251 not limited to performby an external force. For example, the flexible display unit 251 can bedeformed into the second state from the first state by a user command,application command, or the like.

In accordance with still further embodiments, a mobile terminal may beconfigured as a device which is wearable on a human body. Such devicesgo beyond the usual technique of a user grasping the mobile terminalusing their hand. Examples of the wearable device include a smart watch,a smart glass, a head mounted display (HMD), and the like.

A typical wearable device can exchange data with (or cooperate with)another mobile terminal 100. In such a device, the wearable devicegenerally has functionality that is less than the cooperating mobileterminal. For instance, the short-range communication module 114 of amobile terminal 100 may sense or recognize a wearable device that isnear-enough to communicate with the mobile terminal. In addition, if thesensed wearable device is a device which is authenticated to communicatewith the mobile terminal 100, the controller 180 may transmit dataprocessed in the mobile terminal 100 to the wearable device via theshort-range communication module 114, for example. Hence, a user of thewearable device can use the data processed in the mobile terminal 100 onthe wearable device. For example, if a call is received in the mobileterminal 100, the user can answer the call using the wearable device.Also, if a message is received in the mobile terminal 100, the user cancheck the received message using the wearable device.

FIG. 3 is a perspective view illustrating one example of a watch-typemobile terminal 300 in accordance with another exemplary embodiment. Asillustrated in FIG. 3, the watch-type mobile terminal 300 includes amain body 301 with a display unit 351 and a band 302 connected to themain body 301 to be wearable on a wrist. In general, mobile terminal 300may be configured to include features that are the same or similar tothat of mobile terminal 100 of FIGS. 1A-1C.

The main body 301 may include a case having a certain appearance. Asillustrated, the case may include a first case 301 a and a second case301 b cooperatively defining an inner space for accommodating variouselectronic components. Other configurations are possible. For instance,a single case may alternatively be implemented, with such a case beingconfigured to define the inner space, thereby implementing a mobileterminal 300 with a uni-body.

The watch-type mobile terminal 300 can perform wireless communication,and an antenna for the wireless communication can be installed in themain body 301. The antenna may extend its function using the case. Forexample, a case including a conductive material may be electricallyconnected to the antenna to extend a ground area or a radiation area.

The display unit 351 is shown located at the front side of the main body301 so that displayed information is viewable to a user. In someembodiments, the display unit 351 includes a touch sensor so that thedisplay unit can function as a touch screen. As illustrated, window 351a is positioned on the first case 301 a to form a front surface of theterminal body together with the first case 301 a.

The illustrated embodiment includes audio output module 352, a camera321, a microphone 322, and a user input unit 323 positioned on the mainbody 301. If the display unit 351 is implemented as a touch screen,additional function keys may be minimized or eliminated. For example, ifthe touch screen is implemented, the user input unit 323 may be omitted.

The band 302 is commonly worn on the user's wrist and may be made of aflexible material for facilitating wearing of the device. As oneexample, the band 302 may be made of fur, rubber, silicon, syntheticresin, or the like. The band 302 may also be configured to be detachablefrom the main body 301. Accordingly, the band 302 may be replaceablewith various types of bands according to a user's preference.

In one configuration, the band 302 may be used for extending theperformance of the antenna. For example, the band may include therein aground extending portion (not shown) electrically connected to theantenna to extend a ground area.

The band 302 may include fastener 302 a. The fastener 302 a may beimplemented into a buckle type, a snap-fit hook structure, a Velcro®type, or the like, and include a flexible section or material. Thedrawing illustrates an example that the fastener 302 a is implementedusing a buckle.

FIG. 4 is a perspective view illustrating one example of a glass-typemobile terminal 400 according to another exemplary embodiment. Theglass-type mobile terminal 400 can be wearable on a head of a human bodyand provided with a frame (case, housing, etc.) therefor. The frame maybe made of a flexible material to be easily worn. The frame of mobileterminal 400 is shown having a first frame 401 and a second frame 402,which can be made of the same or different materials. In general, mobileterminal 400 may be configured to include features that are the same orsimilar to that of mobile terminal 100 of FIGS. 1A-1C.

The frame may be supported on the head and defines a space for mountingvarious components. As illustrated, electronic components, such as acontrol module 480, an audio output module 452, and the like, may bemounted to the frame part. Also, a lens 403 for covering either or bothof the left and right eyes may be detachably coupled to the frame part.

The control module 480 controls various electronic components disposedin the mobile terminal 400. The control module 480 may be understood asa component corresponding to the aforementioned controller 180. FIG. 4illustrates that the control module 480 is installed in the frame parton one side of the head, but other locations are possible.

The display unit 451 may be implemented as a head mounted display (HMD).The HMD refers to display techniques by which a display is mounted to ahead to show an image directly in front of a user's eyes. In order toprovide an image directly in front of the user's eyes if the user wearsthe glass-type mobile terminal 400, the display unit 451 may be locatedto correspond to either or both of the left and right eyes. FIG. 4illustrates that the display unit 451 is located on a portioncorresponding to the right eye to output an image viewable by the user'sright eye.

The display unit 451 may project an image into the user's eye using aprism. Also, the prism may be formed from optically transparent materialsuch that the user can view both the projected image and a generalvisual field (a range that the user views through the eyes) in front ofthe user.

In such a manner, the image output through the display unit 451 may beviewed while overlapping with the general visual field. The mobileterminal 400 may provide an augmented reality (AR) by overlaying avirtual image on a realistic image or background using the display.

The camera 421 may be located adjacent to either or both of the left andright eyes to capture an image. Since the camera 421 is located adjacentto the eye, the camera 421 can acquire a scene that the user iscurrently viewing. The camera 421 may be positioned at most any locationof the mobile terminal. In some embodiments, multiple cameras 421 may beutilized. Such multiple cameras 421 may be used to acquire astereoscopic image.

The glass-type mobile terminal 400 may include user input units 423 aand 423 b, which can each be manipulated by the user to provide aninput. The user input units 423 a and 423 b may employ techniques whichpermit input via a tactile input. Typical tactile inputs include atouch, push, or the like. The user input units 423 a and 423 b are shownoperable in a pushing manner and a touching manner as they are locatedon the frame part and the control module 480, respectively.

If desired, mobile terminal 400 may include a microphone which processesinput sound into electric audio data, and an audio output module 452 foroutputting audio. The audio output module 452 may be configured toproduce audio in a general audio output manner or an osteoconductivemanner. If the audio output module 452 is implemented in theosteoconductive manner, the audio output module 452 may be closelyadhered to the head if the user wears the mobile terminal 400 andvibrate the user's skull to transfer sounds.

A communication system which is operable with the variously describedmobile terminals will now be described in more detail. Such acommunication system may be configured to utilize any of a variety ofdifferent air interfaces and/or physical layers. Examples of such airinterfaces utilized by the communication system include FrequencyDivision Multiple Access (FDMA), Time Division Multiple Access (TDMA),Code Division Multiple Access (CDMA), Universal MobileTelecommunications System (UMTS) (including, Long Term Evolution (LTE),LTE-A (Long Term Evolution-Advanced)), Global System for MobileCommunications (GSM), and the like.

By way of a non-limiting example only, further description will relateto a CDMA communication system, but such teachings apply equally toother system types including a CDMA wireless communication system aswell as OFDM (Orthogonal Frequency Division Multiplexing) wirelesscommunication system. A CDMA wireless communication system generallyincludes one or more mobile terminals (MT or User Equipment, UE) 100,one or more base stations (BSs, NodeB, or evolved NodeB), one or morebase station controllers (BSCs), and a mobile switching center (MSC).The MSC is configured to interface with a conventional Public SwitchedTelephone Network (PSTN) and the BSCs. The BSCs are coupled to the basestations via backhaul lines. The backhaul lines may be configured inaccordance with any of several known interfaces including, for example,E1/T1, ATM, IP, PPP, Frame Relay, HDSL, ADSL, or xDSL. Hence, theplurality of BSCs can be included in the CDMA wireless communicationsystem.

Each base station may include one or more sectors, each sector having anomni-directional antenna or an antenna pointed in a particular directionradially away from the base station. Alternatively, each sector mayinclude two or more different antennas. Each base station may beconfigured to support a plurality of frequency assignments, with eachfrequency assignment having a particular spectrum (e.g., 1.25 MHz, 5MHz, etc.).

The intersection of sector and frequency assignment may be referred toas a CDMA channel. The base stations may also be referred to as BaseStation Transceiver Subsystems (BTSs). In some cases, the term “basestation” may be used to refer collectively to a BSC, and one or morebase stations. The base stations may also be denoted as “cell sites.”Alternatively, individual sectors of a given base station may bereferred to as cell sites.

A broadcasting transmitter (BT) transmits a broadcast signal to themobile terminals 100 operating within the system. The broadcastreceiving module 111 of FIG. 1A is typically configured inside themobile terminal 100 to receive broadcast signals transmitted by the BT.

Global Positioning System (GPS) satellites for locating the position ofthe mobile terminal 100, for example, may cooperate with the CDMAwireless communication system. Useful position information may beobtained with greater or fewer satellites than two satellites. It is tobe appreciated that other types of position detection technology, (i.e.,location technology that may be used in addition to or instead of GPSlocation technology) may alternatively be implemented. If desired, atleast one of the GPS satellites may alternatively or additionally beconfigured to provide satellite DMB transmissions.

The location information module 115 is generally configured to detect,calculate, or otherwise identify a position of the mobile terminal. Asan example, the location information module 115 may include a GlobalPosition System (GPS) module, a Wi-Fi module, or both. If desired, thelocation information module 115 may alternatively or additionallyfunction with any of the other modules of the wireless communicationunit 110 to obtain data related to the position of the mobile terminal.

A typical GPS module 115 can measure an accurate time and distance fromthree or more satellites, and accurately calculate a current location ofthe mobile terminal according to trigonometry based on the measured timeand distances. A method of acquiring distance and time information fromthree satellites and performing error correction with a single satellitemay be used. In particular, the GPS module may acquire an accurate timetogether with three-dimensional speed information as well as thelocation of the latitude, longitude and altitude values from thelocation information received from the satellites.

Furthermore, the GPS module can acquire speed information in real timeto calculate a current position. Sometimes, accuracy of a measuredposition may be compromised if the mobile terminal is located in a blindspot of satellite signals, such as being located in an indoor space. Inorder to minimize the effect of such blind spots, an alternative orsupplemental location technique, such as Wi-Fi Positioning System (WPS),may be utilized.

The Wi-Fi positioning system (WPS) refers to a location determinationtechnology based on a wireless local area network (WLAN) using Wi-Fi asa technology for tracking the location of the mobile terminal 100. Thistechnology typically includes the use of a Wi-Fi module in the mobileterminal 100 and a wireless access point for communicating with theWi-Fi module.

The Wi-Fi positioning system may include a Wi-Fi location determinationserver, a mobile terminal, a wireless access point (AP) connected to themobile terminal, and a database stored with wireless AP information.

The mobile terminal connected to the wireless AP may transmit a locationinformation request message to the Wi-Fi location determination server.The Wi-Fi location determination server extracts the information of thewireless AP connected to the mobile terminal 100, based on the locationinformation request message (or signal) of the mobile terminal 100. Theinformation of the wireless AP may be transmitted to the Wi-Fi locationdetermination server through the mobile terminal 100, or may betransmitted to the Wi-Fi location determination server from the wirelessAP.

The information of the wireless AP extracted based on the locationinformation request message of the mobile terminal 100 may include oneor more of media access control (MAC) address, service setidentification (SSID), received signal strength indicator (RSSI),reference signal received Power (RSRP), reference signal receivedquality (RSRQ), channel information, privacy, network type, signalstrength, noise strength, and the like.

The Wi-Fi location determination server may receive the information ofthe wireless AP connected to the mobile terminal 100 as described above,and may extract wireless AP information corresponding to the wireless APconnected to the mobile terminal from the pre-established database. Theinformation of any wireless APs stored in the database may beinformation such as MAC address, SSID, RSSI, channel information,privacy, network type, latitude and longitude coordinate, building atwhich the wireless AP is located, floor number, detailed indoor locationinformation (GPS coordinate available), AP owner's address, phonenumber, and the like. In order to remove wireless APs provided using amobile AP or an illegal MAC address during a location determiningprocess, the Wi-Fi location determination server may extract only apredetermined number of wireless AP information in order of high RSSI.

Then, the Wi-Fi location determination server may extract (analyze)location information of the mobile terminal 100 using at least onewireless AP information extracted from the database.

A method for extracting (analyzing) location information of the mobileterminal 100 may include a Cell-ID method, a fingerprint method, atrigonometry method, a landmark method, and the like.

The Cell-ID method is used to determine a position of a wireless APhaving the largest signal strength, among peripheral wireless APinformation collected by a mobile terminal, as a position of the mobileterminal. The Cell-ID method is an implementation that is minimallycomplex, does not require additional costs, and location information canbe rapidly acquired. However, in the Cell-ID method, the precision ofpositioning may fall below a desired threshold if the installationdensity of wireless APs is low.

The fingerprint method is used to collect signal strength information byselecting a reference position from a service area, and to track aposition of a mobile terminal using the signal strength informationtransmitted from the mobile terminal based on the collected information.In order to use the fingerprint method, it is common for thecharacteristics of radio signals to be pre-stored in the form of adatabase.

The trigonometry method is used to calculate a position of a mobileterminal based on a distance between coordinates of at least threewireless APs and the mobile terminal. In order to measure the distancebetween the mobile terminal and the wireless APs, signal strength may beconverted into distance information, Time of Arrival (ToA), TimeDifference of Arrival (TDoA), Angle of Arrival (AoA), or the like may betaken for transmitted wireless signals.

The landmark method is used to measure a position of a mobile terminalusing a known landmark transmitter.

In addition to these position location methods, various algorithms maybe used to extract (analyze) location information of a mobile terminal.Such extracted location information may be transmitted to the mobileterminal 100 through the Wi-Fi location determination server, therebyacquiring location information of the mobile terminal 100.

The mobile terminal 100 can acquire location information by beingconnected to at least one wireless AP. The number of wireless APsrequired to acquire location information of the mobile terminal 100 maybe variously changed according to a wireless communication environmentwithin which the mobile terminal 100 is positioned.

As previously described with regard to FIG. 1A, the mobile terminal maybe configured to include short-range communication techniques such asBluetooth™, Radio Frequency Identification (RFID), Infrared DataAssociation (IrDA), UltraWideband (UWB), ZigBee, Near FieldCommunication (NFC), Wireless USB (Wireless Universal Serial Bus), andthe like.

A typical NFC module provided at the mobile terminal supportsshort-range wireless communication, which is a non-contactable type ofcommunication between mobile terminals and generally occurs within about10 cm. The NFC module may operate in one of a card mode, a reader mode,or a P2P mode. The mobile terminal 100 may further include a securitymodule for storing card information, in order to operate the NFC modulein a card mode. The security module may be a physical medium such asUniversal Integrated Circuit Card (UICC) (e.g., a SubscriberIdentification Module (SIM) or Universal SIM (USIM)), a secure micro SDand a sticker, or a logical medium (e.g., embedded Secure Element (SE))embedded in the mobile terminal. Single Wire Protocol (SWP)-based dataexchange may be performed between the NFC module and the securitymodule.

In a case where the NFC module operates in a card mode, the mobileterminal may transmit card information on a general IC card to theoutside. More specifically, if a mobile terminal having card informationon a payment card (e. g, a credit card or a bus card) approaches a cardreader, a short-range mobile payment may be executed. As anotherexample, if a mobile terminal which stores card information on anentrance card approaches an entrance card reader, an entrance approvalprocedure may start. A card such as a credit card, a traffic card, or anentrance card may be included in the security module in the form ofapplet, and the security module may store card information on the cardmounted therein. Card information for a payment card may include any ofa card number, a remaining amount and usage history, and the like. Cardinformation of an entrance card may include any of a user's name, auser's number (e.g., undergraduate number or staff number), an entrancehistory, and the like.

If the NFC module operates in a reader mode, the mobile terminal canread data from an external tag. The data received from the external tagby the mobile terminal may be coded into the NFC Data Exchange Formatdefined by the NFC Forum. The NFC Forum generally defines four recordtypes. More specifically, the NFC Forum defines four Record TypeDefinitions (RTDs) such as smart poster, text, Uniform ResourceIdentifier (URI), and general control. If the data received from theexternal tag is a smart poster type, the controller may execute abrowser (e.g., Internet browser). If the data received from the externaltag is a text type, the controller may execute a text viewer. If thedata received from the external tag is a URI type, the controller mayexecute a browser or originate a call. If the data received from theexternal tag is a general control type, the controller may execute aproper operation according to control content.

In some cases in which the NFC module operates in a P2P (Peer-to-Peer)mode, the mobile terminal can execute P2P communication with anothermobile terminal. In this case, Logical Link Control Protocol (LLCP) maybe applied to the P2P communication. For P2P communication, connectionmay be generated between the mobile terminal and another mobileterminal. This connection may be categorized as a connectionless modewhich ends after one packet is switched, and a connection-oriented modein which packets are switched consecutively. For a typical P2Pcommunication, data such as an electronic type name card, addressinformation, a digital photo and a URL, a setup parameter for Bluetoothconnection, Wi-Fi connection, etc. may be switched. The P2P mode can beeffectively utilized in switching data of a small capacity, because anavailable distance for NFC communication is relatively short.

Further preferred embodiments will be described in more detail withreference to additional drawing figures. It is understood by thoseskilled in the art that the present features can be embodied in severalforms without departing from the characteristics thereof.

FIG. 5 is a diagram illustrating the detailed configuration of acontroller according to an embodiment of the present invention.

Although the controller 180 includes the components of FIG. 5, this ismerely exemplary and the learning data unit 130 may include thecomponents of FIG. 5.

That is, the learning data unit 130 may replace the controller 180.

Referring to FIG. 5, the controller 180 includes an authenticationapplication management unit 510, an authentication controller 530, afirst authentication unit 550 and a second authentication unit 570.

The authentication application management unit 510 may transmit receivedauthentication information to the authentication controller 530according to an authentication request of a user.

The authentication controller 530 may transmit an explicitauthentication request including the received authentication informationto the first authentication unit 550.

The first authentication unit 550 may determine whether explicitauthentication has succeeded using the authentication informationincluded in the explicit authentication request of the authenticationcontroller 530, and transmit a notification indicating whether explicitauthentication has succeeded to the authentication controller 530according to the result of determination.

The authentication controller 530 may transmit the notificationindicating whether explicit authentication has succeeded to theauthentication application management unit 510.

When explicit authentication has succeeded, the authenticationcontroller 530 may transmit an enrollment start request for implicitauthentication to the second authentication unit 570.

The second authentication unit 570 may perform an enrollment procedurefor implicit authentication according to the received enrollment startrequest.

When the enrollment procedure ends, the second authentication unit 570may transmit an enrollment end notification indicating that enrollmentfor implicit authentication has ended to the authentication controller530.

When the enrollment end notification is received, the authenticationcontroller 530 may periodically transmit a continuous authenticationrequest for performing implicit authentication to the secondauthentication unit 570.

The second authentication unit 570 may periodically perform implicitauthentication according to reception of continuous authenticationrequest, and determine whether implicit authentication has succeeded.

When implicit authentication has succeeded, the second authenticationunit 570 may transmit an authentication success notification indicatingthat implicit authentication has succeeded to the authenticationcontroller 530.

The authentication controller 530 may maintain authentication accordingto reception of the authentication success notification.

When implicit authentication has failed, the second authentication unit570 may transmit an authentication failure notification indicating thatimplicit authentication has failed to the authentication controller 530.

The authentication controller 530 may release authentication accordingto the authentication failure notification.

Thereafter, the authentication controller 530 may transmit anauthentication release notification indicating that authentication hasbeen released to the authentication application management unit 510.

FIG. 6 is a flowchart illustrating a method of operating a mobileterminal according to an embodiment of the present invention.

Referring to FIG. 6, the authentication application management unit 510transmits received authentication information to the authenticationcontroller 530 according to an authentication request of a user (S601).

In one embodiment, the authentication information may be authenticationnecessary to determine explicit authentication.

The authentication information may include one or more of a passwordinput by the user, a fingerprint of the user, a facial image of theuser, an iris image of the user, and heartrate information of the user.

The authentication controller 530 transmits an explicit authenticationrequest including the received authentication information to the firstauthentication unit 550 (S603).

In one embodiment, the authentication controller 530 may sequentiallyperform an explicit authentication procedure and an implicitauthentication procedure, when an authentication request for disablingsecurity of a specific function of the mobile terminal 100 is received.

The specific function may refer to a function for disabling securitysuch as unlocking.

In one embodiment, the explicit authentication procedure may performauthentication through matching of pre-enrolled biometric informationsuch as the fingerprint of the user, the iris of the user, the face ofthe user, the heartrate of the user, etc.

The explicit authentication procedure may further include passwordauthentication for performing authentication by inputting particularnumbers or characters.

In one embodiment, the implicit authentication procedure may refer to anauthentication procedure of identifying the user based on collected datausing artificial intelligence such as machine learning.

Specifically, the implicit authentication procedure may be a procedureof authenticating a user using data on a user behavior pattern.

The implicit authentication procedure will be described below.

The first authentication unit 550 determines whether explicitauthentication has succeeded using the authentication informationincluded in the explicit authentication request of the authenticationcontroller 530 and transmits a notification indicating whether explicitauthentication has succeeded to the authentication controller 530according to the result of determination (S605).

When explicit authentication has succeeded, the first authenticationunit 550 may transmit a notification indicating that explicitauthentication has succeeded to the authentication controller 530. Thenotification indicating that explicit authentication has succeeded maytrigger an enrollment procedure for implicit authentication.

When explicit authentication has failed, the first authentication unit550 may transmit a notification indicating that explicit authenticationhas failed to the authentication controller 530.

The authentication controller 530 transmits the notification indicatingwhether explicit authentication has succeeded to the authenticationapplication management unit 510 (S607).

Upon determining that explicit authentication has succeeded, theauthentication application management unit 510 may output thenotification indicating that explicit authentication has succeededthrough the display unit 151 or the audio output unit 152.

Upon determining that explicit authentication has failed, theauthentication application management unit 510 may output thenotification indicating that explicit authentication has failed throughthe display unit 151 or the audio output unit 152.

When explicit authentication has succeeded, the authenticationcontroller 530 transmits an enrollment start request for implicitauthentication to the second authentication unit 570 (S609).

The second authentication unit 570 performs an enrollment procedureaccording to the received enrollment start request (S611).

The second authentication unit 570 may perform the enrollment procedurefor implicit authentication according to the enrollment start requestreceived from the authentication controller 530.

In one embodiment, the enrollment procedure for implicit authenticationmay refer to a procedure of collecting the user behavior pattern for apredetermined period before or after performing explicit authentication.

Although the predetermined period may be 1 to 5 minutes before or afterperforming explicit authentication, this is merely exemplary. Thepredetermined period may be set as default or changed according to userinput.

The user behavior pattern may be a behavior pattern taken by the userbefore or after performing the explicit authentication procedure.

For example, the user behavior pattern may include one or more ofwhether the user holds the mobile terminal 100, the gaze direction ofthe user and the walking pattern of the user before or after performingthe explicit authentication procedure.

The second authentication unit 570 may collect the user behavior patternduring the predetermined period before or immediately after performingexplicit authentication.

The collected user behavior pattern may be stored in the memory 170.

The second authentication unit 570 may collect first data on whether theuser holds the mobile terminal 100 through a gyro sensor before or afterperforming the explicit authentication procedure.

The second authentication unit 570 may collect second data on the gazedirection of the user through the camera 121 before or after performingthe explicit authentication procedure.

The second authentication unit 570 may collect third data on whether theuser walks through an acceleration sensor or a gyro sensor before orafter performing the explicit authentication procedure.

The second authentication unit 570 may collect fourth data on a touchinput speed of a keyboard displayed on the display unit 151 before orafter performing the explicit authentication procedure.

The touch input speed of the keyboard may be an average speed of touchinput speeds collected during the predetermined time.

The second authentication unit 570 may store the collected first tofourth data in the memory 170, for implicit authentication.

The stored first to fourth data may be used as a criterion used todetermine whether continuous authentication is maintained later.

When the enrollment procedure ends, the second authentication unit 570transmits an enrollment end notification indicating that implicitauthentication has ended to the authentication controller 530 (S613).

When the enrollment end notification is received, the authenticationcontroller 530 periodically transmits a continuous authenticationrequest for performing implicit authentication to the secondauthentication unit 570 (S615).

The continuous authentication request may be transmitted in order todetermine whether authentication of a specific function of the mobileterminal 100 is maintained. For example, the continuous authenticationrequest may be transmitted in order to determine whether an unlockedstate of a specific function of the mobile terminal 100 is maintained oris changed to a locked state.

The second authentication unit 570 periodically performs implicitauthentication according to reception of the continuous authenticationrequest (S617), and determines whether implicit authentication hassucceeded (S619).

In one embodiment, the second authentication unit 570 may recollect theuser behavior pattern when the continuous authentication request isreceived.

The second authentication unit 570 may determine whether the recollecteduser behavior pattern matches the pre-enrolled user behavior pattern.

When the recollected user behavior pattern matches the pre-enrolled userbehavior pattern, the second authentication unit 570 may determine thatimplicit authentication has succeeded.

In one embodiment, when each of a plurality of behavior items includedin the recollected user behavior pattern matches each of the pluralityof behavior items included in the pre-enrolled user behavior pattern,the second authentication unit 570 may determine that implicitauthentication has succeeded.

The plurality of behavior items may include a first behavior itemindicating that the user holds the mobile terminal 100, a secondbehavior item indicating whether the gaze direction of the user isdirected toward the front surface of the display unit 151 and a thirdbehavior item including the touch input speed of the keyboard.

The second authentication unit 570 may determine that the user behaviorpatterns match, when newly collected first to third behavior itemsrespectively match pre-enrolled first to third behavior items.

That is, the second authentication unit 570 may determine that implicitauthentication has succeeded, when newly collected first to thirdbehavior items respectively match pre-enrolled first to third behavioritems.

In another embodiment, the second authentication unit 570 may determinethat implicit authentication has succeeded, when any one of newlycollected first to third behavior items matches any one of pre-enrolledfirst to third behavior items.

In another embodiment, the second authentication unit 570 may determinethat implicit authentication has succeeded, when two of newly collectedfirst to third behavior items match two of pre-enrolled first to thirdbehavior items.

The second authentication unit 570 may determine that implicitauthentication has failed, when the newly collected user behaviorpattern does not match pre-enrolled user behavior pattern.

When implicit authentication has succeeded, the second authenticationunit 570 transmits an authentication success notification indicatingthat implicit authentication has succeeded to the authenticationcontroller 530 (S621).

The authentication controller 530 maintains authentication according toreception of the authentication success notification (S623).

In one embodiment, maintaining authentication may indicate maintainingthe unlocked state of the mobile terminal 100.

In another embodiment, maintaining authentication may indicatemaintaining login state of a specific application.

When a predetermined time has passed after the authentication controller530 maintains authentication, the continuous authentication request maybe transmitted to the second authentication unit 570 again. That is, theauthentication controller 530 may periodically transmit the continuousauthentication request to the second authentication unit 570 and performthe implicit authentication procedure, in the process of maintainingauthentication.

When implicit authentication has failed, the second authentication unit570 transmits an authentication failure notification indicating thatimplicit authentication has failed to the authentication controller 530(S625).

The authentication controller 530 release authentication according toreception of the authentication failure notification (S627).

For example, the authentication controller 530 may change the unlockedstate of the mobile terminal 100 to the locked state according toreception of the authentication failure notification.

Thereafter, the authentication controller 530 transmits anauthentication release notification indicating that authentication hasbeen released to the authentication application management unit 510(S629).

The authentication application management unit 510 may displayauthentication release through the display unit 151.

Meanwhile, according to one embodiment of the present invention, theauthentication controller 530 may update data necessary for implicitauthentication whenever explicit authentication is performed.

For example, assume that, first, explicit authentication is performedand the keyboard input speed enrolled for success of implicitauthentication is a first speed, and, second and third, explicitauthentication is performed and the keyboard input speed enrolled forimplicit authentication is a second speed.

The second authentication unit 570 may update the keyboard input speedenrolled for implicit authentication from the first speed to the secondspeed. That is, when the behavior item “keyboard input speed” is changedby a predetermined number of times or more, the second authenticationunit 570 may re-enroll the corresponding item.

The second authentication unit 570 may determine whether implicitauthentication has succeeded, based on the keyboard input speedre-enrolled for implicit authentication, after explicit authentication.

FIG. 7 is a diagram illustrating a conventional explicit authenticationprocedure, FIG. 8 is a diagram illustrating a conventional implicitauthentication procedure, and FIG. 9 is a diagram illustrating anauthentication procedure obtained by combining explicit authenticationand implicit authentication according to an embodiment of the presentinvention.

Referring to FIG. 7, the enrollment procedure needs to be performed onceor twice, for explicit authentication.

For example, when explicit authentication is performed using a password,the enrollment procedure in which the user inputs the password once ortwice is required.

After enrolling the password, the user should input the pre-enrolledpassword in order to perform explicit authentication.

FIG. 8 shows the implicit authentication procedure.

For implicit authentication, it is necessary to enroll a user behaviorpattern. The user behavior pattern was described above.

When the user behavior pattern is enrolled, the second authenticationunit 570 may periodically perform the implicit authentication procedure.The period of the implicit authentication procedure may be 5 seconds,but it is merely exemplary.

That is, the second authentication unit 570 may determine whether apre-enrolled user behavior pattern matches a newly collected userbehavior pattern.

The second authentication unit 570 may maintain the authenticated statewhen the pre-enrolled user behavior pattern matches the newly collecteduser behavior pattern.

Referring to FIG. 9, a hybrid authentication procedure obtained bycombining explicit authentication and implicit authentication accordingto an embodiment of the present invention is shown.

First, the authentication controller 530 may perform an enrollmentprocedure 910 for explicit authentication.

Thereafter, the authentication controller 530 may receive authenticationinformation for explicit authentication and perform an explicitauthentication procedure 930 according to the received authenticationinformation.

The authentication controller 530 may perform an enrollment procedure951 of a first user behavior pattern before performing the explicitauthentication procedure 930 or an enrollment procedure 953 of a seconduser behavior pattern after performing the explicit authenticationprocedure 930.

Thereafter, the second authentication unit 570 may compare thepre-enrolled first user behavior pattern or the pre-enrolled second userbehavior pattern with the newly collected user behavior pattern.

The second authentication unit 570 may periodically perform an implicitauthentication procedure 970 according to the result of comparison.

When the pre-enrolled user behavior pattern matches the newly collecteduser behavior pattern, the second authentication unit 570 may determinethat implicit authentication has succeeded and maintain theauthenticated state.

When the pre-enrolled user behavior pattern does not match the newlycollected user behavior pattern, the second authentication unit 570 maydetermine that implicit authentication has failed and release theauthenticated state.

According to the embodiment of the present invention, it is possible toenhance security with respect to continuous authentication, by combiningexplicit authentication and implicit authentication.

In addition, according to the embodiment of the present invention, it ispossible to reduce an enrollment time for implicit authentication, bycombining explicit authentication and implicit authentication.

The present invention mentioned in the foregoing description may beimplemented using a machine-readable medium having instructions storedthereon for execution by a processor to perform various methodspresented herein. Examples of possible machine-readable mediums includeHDD (Hard Disk Drive), SSD (Solid State Disk), SDD (Silicon Disk Drive),ROM, RAM, CD-ROM, a magnetic tape, a floppy disk, an optical datastorage device, the other types of storage mediums presented herein, andcombinations thereof. If desired, the machine-readable medium may berealized in the form of a carrier wave (for example, a transmission overthe Internet). The processor may include the controller 180 of themobile terminal.

The foregoing embodiments are merely exemplary and are not to beconsidered as limiting the present disclosure. This description isintended to be illustrative, and not to limit the scope of the claims.Many alternatives, modifications, and variations will be apparent tothose skilled in the art. The features, structures, methods, and othercharacteristics of the exemplary embodiments described herein may becombined in various ways to obtain additional and/or alternativeexemplary embodiments.

As the present features may be embodied in several forms withoutdeparting from the characteristics thereof, it should also be understoodthat the above-described embodiments are not limited by any of thedetails of the foregoing description, unless otherwise specified, butrather should be considered broadly within its scope as defined in theappended claims, and therefore all changes and modifications that fallwithin the metes and bounds of the claims, or equivalents of such metesand bounds, are therefore intended to be embraced by the appendedclaims.

What is claimed is:
 1. A mobile terminal comprising: an output unit configured to output whether authentication successes; a controller configured to perform explicit authentication based on authentication information, to collect data for implicit authentication if the explicit authentication successes, and to enroll a user behavior pattern for the implicit authentication based on the collected data; and a memory configured to store the user behavior pattern.
 2. The mobile terminal of claim 1, wherein the controller maintains an authenticated state if the enrolled user behavior pattern matches a newly acquired user behavior pattern and releases the authenticated state if the enrolled user behavior pattern does not match the newly acquired user behavior pattern.
 3. The mobile terminal of claim 2, wherein the controller releases the authenticated state and outputs a notification indicating that the authenticated state has been released through the output unit.
 4. The mobile terminal of claim 1, wherein the controller enrolls the user behavior pattern using data collected during a predetermined period before or after performing the explicit authentication.
 5. The mobile terminal of claim 4, wherein the user behavior pattern includes a plurality of behavior items, and wherein the plurality of behavior items includes a first behavior item indicating a state in which a user holds the mobile terminal, a second behavior item indicating that a gaze direction of the user is directed toward a front surface of a display unit included in the output unit, and a third behavior item including a touch input speed of a keyboard included on the display unit.
 6. The mobile terminal of claim 5, wherein the controller determines that user behavior patterns match if newly collected first to third behavior items respectively match pre-enrolled first to third behavior items, and determines that the implicit authentication has succeeded.
 7. The mobile terminal of claim 6, wherein the controller maintains the authenticated state if the implicit authentication has succeeded, and periodically performs the implicit authentication.
 8. The mobile terminal of claim 5, wherein the controller determines that user behavior patterns match if any one of newly collected first to third behavior items does not match any one of pre-enrolled first to third behavior items, and determines that the implicit authentication has failed.
 9. The mobile terminal of claim 8, wherein the controller releases the authenticated state, upon determining that the implicit authentication has failed.
 10. The mobile terminal of claim 1, wherein the explicit authentication is performed by inputting a password or inputting biometric information of a user.
 11. The mobile terminal of claim 1, wherein the controller periodically updates the user behavior pattern for the implicit authentication, whenever the explicit authentication is performed. 